OSINT Exposure Assessment
OSINT Exposure Assessment in Zimbabwe
Most attacks start with what you have already published
A forgotten test server on a subdomain, a lookalike domain sending invoices in your name, a staff list that makes phishing easy, a spreadsheet indexed by a search engine. None of it needs hacking to find, and most businesses never look.
Domains and internet footprint
Your domains, subdomains, certificates and internet facing services mapped from public records, including the forgotten ones.
Email spoofing and lookalikes
Whether your email can be faked, and lookalike domains registered close to your name that could be used for fraud.
Leaked documents and code
Public documents, file metadata and code repositories that reveal internal names, systems or keys. Reported so you can remove or rotate them, never used.
Brand impersonation
Fake pages, profiles and WhatsApp numbers using your business name to scam your customers.
How we work
01
Scope
We agree the domains, brands and platforms in scope, and you sign a written authorisation for your own organisation.
02
Collect
Public sources only: records, search engines, certificate logs, code platforms and social platforms. Nothing is attacked.
03
Verify
Each finding is checked against a second source before it goes in the report, so you act on facts, not guesses.
04
Report and fix
Findings ranked by business risk with clear steps, then a call to agree what to close first.
What you get
- Written authorisation and an agreed scope covering your own organisation only
- Passive collection from public sources, with nothing tested or logged in to
- Domain, subdomain, certificate and internet facing service mapping
- Email spoofing and lookalike domain review
- Search for public documents, metadata and code that expose internal detail
- A written report of what was found, why it matters and how to close it
OSINT exposure assessment
Quoted
Priced after scoping, based on how many domains, brands and platforms are in scope. Work starts once the commitment fee in the quote is paid.
Before you approve it
The engagement, in facts.
- Typical timeline
- Agreed at scoping
- Report
- Written findings ranked by business risk, with a fix for each
- Confidentiality
- We sign your NDA before scoping, on request
Questions, answered
What is an OSINT exposure assessment?
OSINT means open source intelligence: information anyone can find in public. The assessment maps what is publicly visible about your business, such as domains, internet facing services, email settings, documents and impersonating pages, and shows how an attacker could use it.
Is it legal, and do you touch our systems?
It is done only for your own organisation with your written authorisation, and it is passive: public sources only, nothing is attacked, logged in to or tested. If you want your systems tested, that is a separate penetration test.
Will you look up our staff?
Only in the business context you agree in the scope, such as which work email addresses are publicly listed and whether staff roles make phishing easy. We do not profile private lives, locate people or collect personal data beyond what the finding needs.
Do you search breach dumps or collect leaked passwords?
No. We do not obtain breach dumps or collect passwords. Where a work address appears in a reputable breach notification service, we report that it is exposed and what to do, not the records themselves.
What do we get at the end?
A written report of what was found, why it matters and how to close it, ranked by business risk, plus a call to agree priorities. Anything sensitive, such as an exposed key, is told to you straight away rather than waiting for the report.